Principal Security Engineer

SimCorp Ltd.; Województwo mazowieckie; On-site; PLN 180,000 - 300,000; Full time

Job summary

SimCorp Ltd. is seeking a Security Engineer to join our Platform Security team. You will protect our products, cloud environments, platforms, and operations from evolving cyber threats while partnering with Engineering, Infrastructure, Architecture, and Product teams.

You will contribute to secure software development lifecycles, detections, logging standards, and incident response playbooks, shaping security strategy across a global technology organization.

Qualifications

• Experience in security disciplines across cloud, application and platform security.
• Ability to influence security strategy and execution.
• Strong collaboration with engineering teams to embed security in processes.

Responsibilities

• Lead security engineering initiatives from planning through implementation across cloud, application, and infrastructure security domains.
• Conduct security assessments, architecture reviews, threat modelling, and risk evaluations with engineering teams.
• Analyze security challenges, identify root causes, and design sustainable solutions with platform teams.
• Contribute to detection capabilities using Microsoft Sentinel, Defender, KQL analytics, and related tooling.
• Define logging, monitoring, and event collection standards across the platform.
• Participate in incident response activities including investigation, containment and lessons learned.
• Perform proactive threat hunting within ownership areas.
• Develop and improve incident response playbooks and security runbooks.
• Translate threat intelligence into tangible security improvements for controls and engineering practices.
• Collaborate with engineers to embed security into CI/CD pipelines and cloud architectures.

Skills

Security engineering

Cloud security

Threat modelling

Incident response

Tools

Microsoft Sentinel

Microsoft Defender

KQL analytics

Job description

WHAT MAKES US, US

Join some of the most innovative thinkers in FinTech as we lead the evolution of financial technology. If you are an innovative, curious, collaborative person who embraces challenges and wants to grow, learn and pursue outcomes with our prestigious financial clients, say Hello to SimCorp!

At its foundation, SimCorp is guided by our values — caring, customer success-driven, collaborative, curious, and courageous. Our people-centered organization focuses on skills development, relationship building, and client success. We take pride in cultivating an environment where all team members can grow, feel heard, valued, and empowered.

WHY THIS ROLE IS IMPORTANT TO US

Security is fundamental to everything we do at SimCorp. As a Security Engineer, you will be a senior technical contributor within our Platform Security team, helping protect our products, cloud environments, platforms, and operations from evolving cyber threats.

Working across cloud security, application security, detection engineering, incident response, and platform security, you will partner closely with Application, Infrastructure, Architecture, and Product Engineering teams to strengthen our overall security posture. We recognize these are broad domains, and no single individual is expected to be an expert in every area. Instead, we are looking for someone who brings strong expertise in one or more security disciplines and a passion for continuous learning.

This is an opportunity to influence security strategy and execution across a global technology organization. Success in this role means delivering meaningful security improvements, strengthening our ability to detect and respond to threats, and enabling engineering teams to build secure and resilient solutions at scale.

WHAT YOU WILL BE RESPONSIBLE FOR

• Lead security engineering initiatives from planning through implementation, driving improvements across cloud, application, infrastructure, and operational security domains.
• Conduct security assessments, architecture reviews, threat modelling exercises, and risk evaluations, helping engineering teams identify and address security gaps.
• Analyze security challenges across multiple technology domains, identify root causes, and work with platform teams to design and implement sustainable solutions.
• Contribute to the development and tuning of detection capabilities using Microsoft Sentinel, Microsoft Defender, KQL analytics, and related security tooling.
• Support the definition and implementation of logging, monitoring, and event collection standards across the platform.
• Participate in incident response activities, including investigation, containment, recovery, root cause analysis, and post-incident reviews.
• Conduct proactive threat hunting activities across environments and systems within your areas of ownership.
• Develop and improve incident response playbooks, security runbooks, and operational security processes.
• Translate threat intelligence, incident findings, and emerging risks into tangible improvements to security controls, monitoring capabilities, and engineering practices.
• Identify security risks proactively and define mitigation strategies before issues can impact the business.
• Lead or contribute to secure software development lifecycle initiatives, security taskforces, architecture discussions, and cross-functional security programs.
• Collaborate with engineering teams to embed security into CI/CD pipelines, development workflows, infrastructure platforms, and cloud architectures.
• Serve as a trusted security advisor for engineers, architects, and product teams, helping guide secure decision-making.
• Communicate technical risks, security recommendations, and incident findings effectively to both technical and non-technical stakeholders, including senior leadership.

WHO WE ARE

For over 50 years, we have worked closely with investment and asset managers to become the world’s leading provider of integrated investment management solutions. We are 3,000+ colleagues with a broad range of nationalities, educations, professional experiences, ages, and backgrounds. SimCorp is an independent subsidiary of the Deutsche Börse Group. Following the recent merger with Axioma, we leverage the combined strength of our brands to provide an industry-leading, full, front-to-back offering for our clients.